OTPAuth URI Builder
Build a valid otpauth:// URI and QR code for 2FA setup. Enter your secret key and account details — instantly generate a scannable QR code for any authenticator app.
📱 Universal Format
The otpauth:// URI format works with every major authenticator app — Google Authenticator, Authy, Microsoft, and more.
🔒 100% Private
Your secret key and QR code are generated entirely in your browser. Nothing is sent to any server or stored anywhere.
⚡ Instant QR
Click "Show QR" to generate a scannable QR code that users can scan directly with their authenticator app.
Frequently Asked Questions
What is an otpauth:// URI?
An otpauth:// URI is a standardised format for encoding all the information needed to configure 2FA in a single string. It includes the secret key, account name, issuer, number of digits, period, and algorithm. When encoded as a QR code, any authenticator app can scan it to set up 2FA automatically.
What parameters do I need?
The minimum required is the account name and secret key. The issuer (your app/service name) is strongly recommended as it labels the entry in the user's authenticator app. Digits (6 is standard), period (30 seconds is standard), and algorithm (SHA1 is universal) can be left at defaults unless you have a specific reason to change them.
Where do I get the secret key?
You generate it when implementing 2FA in your application. Use our TOTP Secret Key Generator to create a cryptographically secure secret key. Store it securely in your database, associated with the user's account.
Should I use SHA1 or SHA256?
Use SHA1 unless you have a specific reason not to. SHA1 is the universal standard for TOTP and is supported by every authenticator app. SHA256 is supported by fewer apps and provides no meaningful security improvement for TOTP given the short code length.